d6630487e0d9cb9ba971a53b82b13198ce59c5acb6d0119fc12e6bff03d8e52b | Triage

Sharing

General

Target

2024-11-21_a6c00d22598f49575fc3bb24c9c81daf_cryptolocker
Size

44KB
Sample

241121-jg2sjstrhp
MD5

a6c00d22598f49575fc3bb24c9c81daf
SHA1

379117bbdc5a80c97e304be7f31cc187424652fc
SHA256

d6630487e0d9cb9ba971a53b82b13198ce59c5acb6d0119fc12e6bff03d8e52b
SHA512

5498e82961777f4a77db389fffe29a2915e8145d64591c99e40576363db32793e32daba8a060cb128114249a7acd111a70ca2105ec364a25d245ca11d2421354
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1TWT:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLC

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_a6c00d22598f49575fc3bb24c9c81daf_cryptolocker
- Size
  
  44KB
- MD5
  
  a6c00d22598f49575fc3bb24c9c81daf
- SHA1
  
  379117bbdc5a80c97e304be7f31cc187424652fc
- SHA256
  
  d6630487e0d9cb9ba971a53b82b13198ce59c5acb6d0119fc12e6bff03d8e52b
- SHA512
  
  5498e82961777f4a77db389fffe29a2915e8145d64591c99e40576363db32793e32daba8a060cb128114249a7acd111a70ca2105ec364a25d245ca11d2421354
- SSDEEP
  
  768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1TWT:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLC
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2